Description
nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)
Remediation
References
Related Vulnerabilities
Drupal 7PK - Security Features Vulnerability (CVE-2016-3163)
WebLogic CVE-2019-2648 Vulnerability (CVE-2019-2648)
WordPress Plugin Simple Download Monitor Multiple Cross-Site Request Forgery Vulnerabilities (3.9.8)
Oracle Database Server CVE-2009-1965 Vulnerability (CVE-2009-1965)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-17671)